DNS Report for echosign.com

• ns-146.awsdns-18.com

  • IPv4: 205.251.192.146
  • IPv6: 2600:9000:5300:9200::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1470.awsdns-55.org

  • IPv4: 205.251.197.190
  • IPv6: 2600:9000:5305:be00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1658.awsdns-15.co.uk

  • IPv4: 205.251.198.122
  • IPv6: 2600:9000:5306:7a00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-809.awsdns-37.net

  • IPv4: 205.251.195.41
  • IPv6: 2600:9000:5303:2900::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-146.awsdns-18.com

  • Status: Responded
  • IP(s): 3.236.206.95, 3.236.206.94, 3.236.206.93
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-1470.awsdns-55.org

  • Status: Responded
  • IP(s): 3.236.206.93, 3.236.206.95, 3.236.206.94
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-1658.awsdns-15.co.uk

  • Status: Responded
  • IP(s): 3.236.206.94, 3.236.206.95, 3.236.206.93
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-809.awsdns-37.net

  • Status: Responded
  • IP(s): 3.236.206.95, 3.236.206.93, 3.236.206.94
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns-146.awsdns-18.com

• Serial: 2016020300
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 300

ns-1470.awsdns-55.org

• Serial: 2016020300
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 300

ns-1658.awsdns-15.co.uk

• Serial: 2016020300
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 300

ns-809.awsdns-37.net

• Serial: 2016020300
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 300

Serial: 2016020300 - OK

REFRESH: 7200 - OK

RETRY: 900 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns-146.awsdns-18.com

• 1 echosign-com.mail.protection.outlook.com ( 52.101.11.15 )
• 2 adobe.mail.protection.outlook.com ( 52.101.8.51 )

ns-1470.awsdns-55.org

• 1 echosign-com.mail.protection.outlook.com ( 52.101.41.56 )
• 2 adobe.mail.protection.outlook.com ( 52.101.41.24 )

ns-1658.awsdns-15.co.uk

• 1 echosign-com.mail.protection.outlook.com ( 52.101.41.56 )
• 2 adobe.mail.protection.outlook.com ( 52.101.11.19 )

ns-809.awsdns-37.net

• 1 echosign-com.mail.protection.outlook.com ( 52.101.8.36 )
• 2 adobe.mail.protection.outlook.com ( 52.101.10.16 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 56.41.101.52.in-addr.arpa -> mail-sj0pr21cu00100.inbound.protection.outlook.com
• 19.11.101.52.in-addr.arpa -> mail-sa9pr04cu00203.inbound.protection.outlook.com
• 16.10.101.52.in-addr.arpa -> mail-bn6pr21cu00500.inbound.protection.outlook.com
• 24.41.101.52.in-addr.arpa -> mail-sj0pr03cu01600.inbound.protection.outlook.com
• 36.8.101.52.in-addr.arpa -> No PTR record found: The DNS query name does not exist: 36.8.101.52.in-addr.arpa.
• 51.8.101.52.in-addr.arpa -> mail-dm1pr04cu00203.inbound.protection.outlook.com
• 15.11.101.52.in-addr.arpa -> mail-sa9pr02cu00207.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 3
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:54.240.14.29 ip4:54.240.14.30 include:checkout.echosign.com include:relay-a.echosign.com include:relay-b.echosign.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 54.240.14.29, 54.240.14.30
• Includes: checkout.echosign.com, relay-a.echosign.com, relay-b.echosign.com
• DNS Lookups: 7
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: mail
• Selector 'mail':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxcSlvPWWeQe8Nh57AahpXHJm44L7kbrd1YF9m3wFJBYbS2ihlWNmbSebCGX7vgHGoJA3iF98KNxDh1qqUCQTJ0xWxci1R3mwhCpEd8aER8yaQclc2uBJFfxMQkJ7XIshWEGrJGZfiqpC4SmZt33wSrqXjVr6Yie1pC4qbniWN5QIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
• Syntax: Valid
• Policy: reject
• Subdomain Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: rua.agari.com, ruf.agari.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.